aboutsummaryrefslogtreecommitdiffstats
path: root/docs/hazmat
diff options
context:
space:
mode:
authorAlex Gaynor <alex.gaynor@gmail.com>2014-03-17 20:50:03 -0700
committerAlex Gaynor <alex.gaynor@gmail.com>2014-03-17 20:50:03 -0700
commit38c42635490d24d7ee88041b52002156c6f5a676 (patch)
tree34606dbe780ec7704051f26b0f12ab8755fca812 /docs/hazmat
parent0380374fdae7bd744e46ad526af721fae11aa475 (diff)
parenta38e8e580c09cebcab528be7e806f63539498f94 (diff)
downloadcryptography-38c42635490d24d7ee88041b52002156c6f5a676.tar.gz
cryptography-38c42635490d24d7ee88041b52002156c6f5a676.tar.bz2
cryptography-38c42635490d24d7ee88041b52002156c6f5a676.zip
Merge pull request #792 from reaperhulk/rsa-pss-verify
RSA PSS Verify
Diffstat (limited to 'docs/hazmat')
-rw-r--r--docs/hazmat/primitives/asymmetric/padding.rst14
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/hazmat/primitives/asymmetric/padding.rst b/docs/hazmat/primitives/asymmetric/padding.rst
index 8a034329..ab676b02 100644
--- a/docs/hazmat/primitives/asymmetric/padding.rst
+++ b/docs/hazmat/primitives/asymmetric/padding.rst
@@ -10,6 +10,17 @@ Padding
correct padding signatures can be forged, messages decrypted, and private
keys compromised.
+.. class:: PSS(mgf)
+
+ .. versionadded:: 0.3
+
+ PSS (Probabilistic Signature Scheme) is a signature scheme defined in
+ :rfc:`3447`. It is more complex than PKCS1 but possesses a `security proof`_.
+ This is the `recommended padding algorithm`_ for RSA signatures.
+
+ :param mgf: A mask generation function object. At this time the only
+ supported MGF is :class:`MGF1`.
+
.. class:: PKCS1v15()
.. versionadded:: 0.3
@@ -17,6 +28,7 @@ Padding
PKCS1 v1.5 (also known as simply PKCS1) is a simple padding scheme
developed for use with RSA keys. It is defined in :rfc:`3447`.
+
Mask Generation Functions
~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -41,3 +53,5 @@ Mask Generation Functions
.. _`Padding is critical`: http://rdist.root.org/2009/10/06/why-rsa-encryption-padding-is-critical/
+.. _`security proof`: http://eprint.iacr.org/2001/062.pdf
+.. _`recommended padding algorithm`: http://www.daemonology.net/blog/2009-06-11-cryptographic-right-answers.html